falcosecurity / plugins

Falco plugins registry
Apache License 2.0
85 stars 77 forks source link

Release process cleanup: unify release, OCI publishing and signing workflows #350

Closed LucaGuerra closed 7 months ago

LucaGuerra commented 1 year ago

Motivation

The plugin release process has recently been improved with GHA. This is great because it can leverage GitHub release flow and publish directly to S3. The problem is that the OCI publishing step is still the older one which is overly complicated by the fact that the plugin building and releasing process used to be somewhere else, and so the OCI registry update step needed to do a lot of inference from git tags, the presence of S3 files and the existence of appropriate tags in the OCI registry. Many of those steps are now unnecessary and are prone to breakage.

Feature

Refactor the plugin release process/pipelines and add OCI updating and signing steps to the release pipeline for each artifact.

Alternatives

The current version is functional but results in wasted maintainer time at each release.

LucaGuerra commented 11 months ago

/assign

poiana commented 8 months ago

Issues go stale after 90d of inactivity.

Mark the issue as fresh with /remove-lifecycle stale.

Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

Provide feedback via https://github.com/falcosecurity/community.

/lifecycle stale

LucaGuerra commented 8 months ago

/remove-lifecycle stale

LucaGuerra commented 7 months ago

/assign alacuku

alacuku commented 7 months ago

Done in #440